BaseSetProcessCreateNotify
BaseSrvNewObDirAcls
BaseSrvNlsLogon
BaseSrvNlsUpdateRegistryCache
ServerDllInitialization
Static task
static1
Behavioral task
behavioral1
Sample
01b993439e8cff652a6a18a6351108b4_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
01b993439e8cff652a6a18a6351108b4_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
01b993439e8cff652a6a18a6351108b4_JaffaCakes118
Size
17KB
MD5
01b993439e8cff652a6a18a6351108b4
SHA1
bba4c100a63c09a0d1d584e440a7d99903368205
SHA256
0aa12fb5535bdd7830a8af74b85139ad074c1fe3f3527ef988335e9a9269b024
SHA512
6fa41498ec19133359ac41274be6b70679cce16282fdaf9c8fb106a3481f3dc6b1d08c2d82be261469942a91a44ba5104e333e64340b1cc1da512c886850471b
SSDEEP
384:B4X7zUvAFUMNGSrqkizXOXOmfs3vTayW2pEYWtZIPY:urz36MNGSrqkizGOmfs/T5W2C38PY
Checks for missing Authenticode signature.
resource |
---|
01b993439e8cff652a6a18a6351108b4_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
NtClose
BaseSetProcessCreateNotify
BaseSrvNewObDirAcls
BaseSrvNlsLogon
BaseSrvNlsUpdateRegistryCache
ServerDllInitialization
BaseSetProcessCreateNotify
BaseSrvNewObDirAcls
BaseSrvNlsLogon
BaseSrvNlsUpdateRegistryCache
ServerDllInitialization
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE